Also, when you get someone else to sign your key, or when you collect a key from someone that you intend to sign, you probably want to do that face-to-face (and maybe check photo ID too). Key signing parties allow for personal interaction that is less vulnerable to a man-in-the-middle attack than purely electronic means. <br>
<br>I make a point to NEVER sign a key that I did not receive from the owner in person. I also don't use a key (eg: for sending email) that does not have a signature or known security attributes. <br><br>If double-key encryption is as strong as we think it is, these extra steps are well worth the effort. <br>
<br clear="all">-- R; <><<br><br><br><br>
<br><br><div class="gmail_quote">On Tue, Dec 21, 2010 at 10:56, <span dir="ltr"><<a href="mailto:jep200404@columbus.rr.com">jep200404@columbus.rr.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
"Steve VanSlyck" wrote:<br>
<br>
> Apologies for asking a really stupid question,<br>
> but why do I need anyone to sign my key[?]<br>
<br>
無. Maybe you do not have such a need.<br>
<br>
Key signing is useful when you give somebody some bits<br>
(such as but not limited to email and files)<br>
and you need them to know that those bits came from you,<br>
that those bits were not from somebody else pretending to be you.<br>
<br>
Most people do not have such a need.<br>
<br>
<br>
_______________________________________________<br>
colug-432 mailing list<br>
<a href="mailto:colug-432@colug.net">colug-432@colug.net</a><br>
<a href="http://lists.colug.net/mailman/listinfo/colug-432" target="_blank">http://lists.colug.net/mailman/listinfo/colug-432</a><br>
</blockquote></div><br>